Vulnerability Researcher

About The Role

You choose research targets, build the tooling to test them at scale (typically fuzzing harnesses), run those campaigns over days or weeks, and analyse the crashes that come out to determine which are exploitable. Most results are not security-relevant; the role exists for the small proportion that are. Confirmed findings are taken through coordinated disclosure with the vendor until a fix is released.

What you will do

• Choose targets and justify the choice

• Build fuzzing harnesses and the triage around them

• Take findings through coordinated disclosure to a fix

What they ask for

• Reverse engineering in a real disassembler

• C and one systems language

• A credited CVE, or work you can walk through in equivalent depth

Nice to have

• Exploit development

• Kernel or browser internals

• Conference talks